Microsoft Windows Server 2019 vulnerabilities
3,952 known vulnerabilities affecting microsoft/windows_server_2019.
Total CVEs
3,952
CISA KEV
125
actively exploited
Public exploits
113
Exploited in wild
171
Severity breakdown
CRITICAL126HIGH2786MEDIUM1024LOW16
Vulnerabilities
Page 124 of 198
CVE-2020-16900P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16900 [HIGH] CVE-2020-16900: <p>An elevation of privilege vulnerability exists when the Windows Event System improperly handles o
An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting ho
nvd
CVE-2021-1662P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1662 [HIGH] CWE-269 CVE-2021-1662: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2023-24858P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.41312023-03-14
CVE-2023-24858 [HIGH] CWE-126 CVE-2023-24858: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
nvd
CVE-2022-21884P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21884 [HIGH] CVE-2022-21884: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
nvd
CVE-2020-0856P3MEDIUMCVSS 6.5≥ 10.0.0, < publication2020-09-11
CVE-2020-0856 [MEDIUM] CVE-2020-0856: <p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mish
An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system.
To exploit this condition, an authenticated attacker would need to send a specially crafted reque
nvd
CVE-2021-26864P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-03-11
CVE-2021-26864 [HIGH] CVE-2021-26864: Windows Virtual Registry Provider Elevation of Privilege Vulnerability
Windows Virtual Registry Provider Elevation of Privilege Vulnerability
nvd
CVE-2023-36004P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.52062023-12-12
CVE-2023-36004 [HIGH] CWE-287 CVE-2023-36004: Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability
Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability
nvd
CVE-2021-24103P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24103 [HIGH] CVE-2021-24103: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-27088P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-04-13
CVE-2021-27088 [HIGH] CVE-2021-27088: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-28436P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-04-13
CVE-2021-28436 [HIGH] CVE-2021-28436: Windows Speech Runtime Elevation of Privilege Vulnerability
Windows Speech Runtime Elevation of Privilege Vulnerability
nvd
CVE-2021-28351P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-04-13
CVE-2021-28351 [HIGH] CVE-2021-28351: Windows Speech Runtime Elevation of Privilege Vulnerability
Windows Speech Runtime Elevation of Privilege Vulnerability
nvd
CVE-2021-28347P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-04-13
CVE-2021-28347 [HIGH] CVE-2021-28347: Windows Speech Runtime Elevation of Privilege Vulnerability
Windows Speech Runtime Elevation of Privilege Vulnerability
nvd
CVE-2021-43248P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.23662021-12-15
CVE-2021-43248 [HIGH] CVE-2021-43248: Windows Digital Media Receiver Elevation of Privilege Vulnerability
Windows Digital Media Receiver Elevation of Privilege Vulnerability
nvd
CVE-2021-34487P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.21142021-08-12
CVE-2021-34487 [HIGH] CWE-269 CVE-2021-34487: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-24102P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24102 [HIGH] CWE-269 CVE-2021-24102: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-33774P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.20612021-07-14
CVE-2021-33774 [HIGH] CVE-2021-33774: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2022-41095P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.36502022-11-09
CVE-2022-41095 [HIGH] CVE-2022-41095: Windows Digital Media Receiver Elevation of Privilege Vulnerability
Windows Digital Media Receiver Elevation of Privilege Vulnerability
nvd
CVE-2021-38671P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.21832021-09-15
CVE-2021-38671 [HIGH] CWE-269 CVE-2021-38671: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-38667P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.21832021-09-15
CVE-2021-38667 [HIGH] CWE-269 CVE-2021-38667: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-34459P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.20612021-07-16
CVE-2021-34459 [HIGH] CWE-269 CVE-2021-34459: Windows AppContainer Elevation Of Privilege Vulnerability
Windows AppContainer Elevation Of Privilege Vulnerability
nvd